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IN THE CLAIMS 

1. (Currently amended) A method for tracking the transmission of a digital file over the 

Internet comprising the steps of: 

receiving packets constituting segments of the file m transit over the Internet; 
examinmg file headers in said packets to delemiine the presence of specific 
identifying indicia therein; 

recording the Internet Protocol header source address for each of the packets 
containing said specific identifying indiciaiand 

gL>nHin f? the received packets unaltered to a next hitem et leg in the transmission 
path of tire file . 

2. (Original) The method of claim 1, including the additional step of recording the 
Internet Protocol header destination address for the file. 

3. (Ori^nal) The method of claim 1, including the additional step of transmitting said 
identifying indicia and said source Internet address to a proprietor of the file. 

4. (Original) The method of cliiim 1, mcluding the additional step of transmitting said 
identifying indicia and said source Internet address to a remote site. 

5. (Original) The method of claim 1, wherein said examining step further includes: 

searching said file headers for TCP headers containing port numbers indicative of 
an email message; 

searching each of said packets, in which port numbers indicative of email messages 
were found, for an attachment; and 

when said attachment is found, locating the source Internet address in an IP header 
for the file containing the attachment. 

6. (Original) The method of claim 1, wherein said identifying indicia comprises a user- 
defined character sequence selected from the group consistmg of: 

an extension to an existing file format, prcpendcd to the file; 

a sequence of bits embedded in the file; and 

an absence of code In a predefined area within the file. 
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7. (Currently ameadcd) A system for tracking an Litemct transnaission of a digital file 
containing identifying indicia in a file header, ihc system comprising: 

a server which receives the file; 

a router which routes packets comprising the file unaltered to a next Internet leg m 
the transmission path of the file; and 

a monitor, connected between said server and said router, which processes packets 
constitutirig segments of the file; 
wherein said monitor is progranuned to: 

examine file headers in said packets to determine the presence of said 

identifying indicia therein; and 

record the source Tntemct address for said file for each of the packets 
containing said identifying indicia. 

8. (Original) The system of claim 7, wherein said monitor is fiarther progranuned to: 

search said file headers for TCP headers containing port numbers indicative of 
email messages; 

search each of said packets, in which port numbers indicative of email messages 
were found, for an attachment; and 

locate the source Internet address in an IP header for tiie file containing the 
attachment. 

9. (Previously amended) The system of claim 7, wherein said identifying indicia 
comprises a user-defined character sequence selected firom the group consisting of: 

an extension to an existing file format, prepended to the file; 

a sequence of bits embedded in the file; and 

an absence of code in a predefined area within the file. 

10. (Currently amended) A system for tracking an Internet transmission of a digital file 
containing idcnti fymg indicia in a file header, the system comprising: 

a modem which receives the file; 
a server for processing the file; and 

. 11 Rttpmn and AmsmttitenLdoe 3 
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a monitor, connected between said modem and said server, which processes packets 
constituting segments of the file; wherein said monitor is programmed to: 

examine file headers hi said packets to determme the presence of said 

identifying mdicia therein; and 

record the source Internet address for said file for each of the packets 
containing said identifying indiciaiand 
means for sending the recctved file unalter ed to a next Tntcmet leg in the 
transmission oath of the file . 
IL (Currently amended) Amctliod for tracking the transmission of a digital file over the 

Internet comprising the steps of: 

receiving packets constituting segments of tlie file in transit over the Internet; 
examining file headers in said packets to determine the presence of specific 
identifying indicia therein; €»ad 

recording, for each of the packets containing said identifying indicia, the soarcc 
Internet address for the filei^nd 

sending tlie received packets itnaltcred to a next hitemet leg in the transmission 
path of the file . 

12. (Original) The method of claim 11, wherein said examining step further includes: 
searching said file headers for TCP headers containing port numbers i ndicati ve o f 
email messages; 

searching each of said packets, in wliich port numbers indicative of email messages 
were found, for a MIME header indicative of an attachment; and 
when said MIME header indicative of an attachment is found: 

searching a header directly prcpended to the file to fmd said identifying 
indicia therein, when said MIME header is indicative of an attachment 
containing a type of said file sought: and 

locating the source Internet address in an TP header for the file containing the 
attachment, when said identifying indicia is found. 
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1 3. (Original) The method oFclaim 1 1 , wherein said identifying indicia comprises a 
user^cfined character sequence selected fTom the group consistmg of: 

an extension to an existing file forroat, prepended to the file; 

a scqueDCe of bits embedded in the file; and 

an absence of code in a predefined area within the file. 

14. (Currently amended) A method for tracking the transmission of a digital file over the 
hitcmet comprising the steps of: 

placing identifying indicia in said digital file; 

using a data communications monitoring device to capture packets of information 
being transmitted via the Internet without allem tion of the captured packets; 
examining certain ones of said packets to determine the presence of said identifying 
indicia in said file; and 

recording the source and destination internet addresses for each of the packets 
containing said identifying indicia, and tlie identity of the file associated therewith. 

15. (Original) The method of claim 14, wherein said identifying indicia is prepcndcd to 
said header 

16. (Original) The method of claim 14, wherein said identifying indicia is embedded in 
said flic. 

17. (Currently amended) A method for tracking die transmission of a digital file over the 
Intemet comprising the steps of: 

receiving packets constituting segments of the file in transit over the Inteinet; 
searching said packets for TCP headers contaming port numbers indicative of email 
messages; 

searching each of said packets, in which said port numbers indicative of email 
messages were found, for a MIME header indicative of an attachment; 9b4 
when said MIME header indicative of an attachment is found: 

searching a header dkectly prcpcnded to the file to locate said identiiying 
indicia therein, when said MJME header is indicative of an attachment 

// JUjpov*! utul AaendmeiU doc 5 
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containing a type of said file sought; 

locating the source Internet address in an IP header for the file containing thb 
attachment containing the type of said file sought, when said identifying 
indicia is located; and 

recording, for each of the packets conUining said identifying indicia, the 

source Internet address for the fil e: and 
sending the received packets unaltered to a next Inte met leg m the transmission 
path of the fxle . 

la. (Original) The method of claim 17. including the additional step of transferring said 
identifying indicia and said source Tniemct address to a proprietor of the file. 

19. (Original) The method of claim 1 8, including the additional step of transferring 
additional information in said file to the proprietor of the file. 

20. (Currently amended) A system for tracking an Intemet transmission of a digital file 
containing identifying indicia in a file header, wlierein said file comprises a plurality of 
packets constituting segments of the file, the system comprising: 

a server for receiving the file; 

a router for routing packets comprising the file unaltered lo a next Internet leg in the 
transmission path of the file; and 

monitoring means, connected between said server and said router, for examining 
flic headers in said packets to determine the presence of said identifying indicia 
therein; and 

means for recording the source Internet address for said file for each of the packets 
containing said identifying indicia. 

21. (Original) The system of claim 20, wherein said monitoring means further comprises 
searching means for 

locating said file headers for TCP headers containing port numbers indicative of 
email messages; 

locating each of said packets, in which port numbers indicative of email messages 

n HaspMte ami Amcndni^ALihc ^ 
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\srere found, for an attachment; and 

locating the source Internet address in an IP header for the file contauiing the 
attachment. 

22. (Currently amended) A method for tracking the Lnmsroission of a digiul file over the 
Internet comprising the steps of: 

receiving packets constituting segments of the file in transit over the Internet; 

searching said packets for an MPEG Layer 3 header prependcd to the file; searching 

said MPEG Layer 3 header for identifying indicia located therein, if said MPEG 

Layer 3 header is located; 

locating the source Internet address in an IP header for tlie file containing said 
identifying indicia, if said identifying indicia is located; and 
recording, for each of the packets containing said identifying indicia, the source. 
Internet address for the fil e: and 

Rcnd jnt? the received packets unaltered to a next Internet leg m the transmission 
path of the file . 

23. (Original) The method of claim 22» wherein said identifying indicia is located in a 
header having a field indicating that the frame size thereof is zero bytes in length, 

24. (Original) The method of claun 22, wherein said identifying indicia is located in a 
header having a firame si/,e field indicating that there is no information field appended to 
the frame size field. 

25. (Original) The method of claim 22, wherein said identifying indicia comprises a 
user-defined character sequence located in the 'fi-ame ID* and 'flags* fields of an TD3v2 
frame header. 

26. (Original) The method of claim 22, wherein said identifying indicia comprises a 
\iser-defincd character sequence selected from the group consisting of: 

an extension to an existing file formal, prcpended to the file; 

a sequence of bits embedded in the file; and 

an absence of code in a predefined area within the file. 
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